Privacy Policy

Summary

Crypto Tax Converter is a file conversion service. You upload a CSV or 1099-DA PDF, we convert it, you pay $6.99, you download the output. We don't require an account, we don't sell data, and the files you upload are deleted after the 24-hour download window.

What we collect

• The file you upload. Processed in memory, stored temporarily so you can return to the preview, deleted when the download window ends.
• The extracted transactions. Stored alongside the conversion record so the preview is restorable. Deleted on the same 24-hour timer.
• A session cookie. Used only to link your browser to the conversion you just created so other visitors can't view it. No tracking identifiers.
• Your email. Captured by Stripe during checkout, so we can send the receipt and respond to refund requests. Stored against the conversion record only.
• Your IP address and user agent. Logged at upload time for abuse prevention (rate limiting, daily global cap). Not used for advertising or analytics profiles.

What we don't do

• We don't sell data.
• We don't share transaction data with third parties for analytics, advertising, or any other purpose.
• We don't require an account, and there's no login to compromise.
• We don't store uploaded PDFs or CSVs beyond the 24-hour download window.

Third parties we use

• Stripe processes payments. We never see your card number — Stripe handles PCI compliance. See Stripe's privacy policy at stripe.com/privacy.
• Anthropic powers the 1099-DA PDF extraction. When you upload a 1099-DA PDF, the extracted text (not the file itself) is sent to Anthropic's API for structured transaction parsing. Per Anthropic's commercial terms, inputs are not used to train their models.
• Resend sends transactional emails (payment receipts, refund confirmations). No marketing email.
• GitHub Container Registry, Hetzner, Cloudflare host the application and serve traffic.

Retention

Uploaded files and the extracted transactions are retained for 24 hours after checkout, then purged. Payment records (Stripe receipt ID, amount, email, refund status) are retained for 7 years as required by US accounting law.

Requests

To request deletion of your data before the automatic purge, or to ask what we have, email privacy@cryptotaxconverter.com with the Stripe session ID from your receipt.

Changes

If this policy changes materially, we'll update the "Last updated" date above. Because there's no account and nothing is stored long-term, we can't notify you by email — check this page before each use if the policy matters to you.